Privacy Policy

This Policy explains what personal data ZHT collects, how we use it, and what your rights are, in compliance with the LGPD (Brazil's General Data Protection Law, Law No. 13,709/2018).

June 2026

1. Who we are

ZHT is a Brazilian AI-powered website-building platform. For the purposes of this Policy, ZHT is the controller of the personal data processed on the platform.

Questions or requests regarding your data can be sent to privacidade@zht.app.

2. Data we collect

Account data: the name and email you provide when creating your account.

Usage data: the websites, pages, text, and images you create, edit, and publish on the platform, as well as the messages received through the forms on your sites.

Payment data: processing is handled by Kiwify. ZHT does not collect or store card data; we receive only the confirmation of the subscription status.

Technical data: access information and records (logs) generated automatically, along with cookies essential for authentication and operation.

3. How we use your data

We use your data to: provide and maintain the service; authenticate your access; process subscriptions and billing; offer support; send transactional communications (email confirmation, password recovery, notices of received messages); and improve the platform.

We do not use your data for third-party advertising, nor do we sell it.

4. Legal basis for processing

We process your data based on the legal grounds set out in the LGPD, in particular: performance of the contract and preliminary procedures (art. 7, V); compliance with a legal or regulatory obligation (art. 7, II); legitimate interest in the security and improvement of the service (art. 7, IX); and consent, where applicable (art. 7, I).

5. Sharing with third parties

We share data only with processors that enable the service, under confidentiality and security obligations, including: Supabase (database and authentication), Vercel (hosting), Kiwify (payments), Resend (email delivery), and image banks (Unsplash and Pexels).

We may also share data when required by law or by order of a competent authority.

6. Cookies

We use essential cookies to maintain your session and the operation of the platform. These cookies are necessary and cannot be disabled.

Should we use non-essential cookies (for example, analytics cookies), they will only be activated with your consent through the cookie banner, which you can review at any time.

7. Data retention

We retain your data for as long as your account is active and for the period necessary to comply with legal obligations. After your account is closed, the data is deleted or anonymized, except where retention is required by law.

8. Your rights (LGPD)

As a data subject, you have the right to: confirm the existence of processing; access your data; correct incomplete or outdated data; request anonymization, blocking, or deletion; data portability; information about sharing; and to withdraw your consent.

To exercise these rights, write to privacidade@zht.app. We will respond within the legal time frames.

9. Security

We adopt technical and organizational measures to protect your data, such as encryption in transit and access controls. No system is 100% secure, but we work continuously to reduce risks.

10. International transfers

Some of our providers may process data outside Brazil. In such cases, we adopt appropriate safeguards to ensure a level of protection consistent with the LGPD.

11. Minors

The platform is not intended for individuals under 18 years of age. We do not knowingly collect data from minors without the consent of their guardians.

12. Changes to this Policy

We may update this Policy from time to time. Significant changes will be communicated through the platform. The date of the last update appears at the top of this page.

13. Contact and Data Protection Officer (DPO)

For any matter related to personal data, contact our Data Protection Officer at privacidade@zht.app.